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Amendments to the Claims : 

A listing of tlie entire set of pending claims (including amendments to the 
claims, if any) is submitted herewith per 37 CFR 1.121. This listing of claims will 
replace all prior versions, and listings, of claims in the application. 

Listing of Claims: 

1 . (Currently amended) A method of authorizing an operation requested by a first 
user on a content item in accordance with a user right certificate identifying a second 
user and authorizing the second user to perform the requested operation on the 
content item, in which the operation is authorized upon receipt of information from the 
first user , linking the first user and the user right certificate of the second user. 

2. (Original) The method of claim 1 , in which the information comprises one or more 
domain certificates identifying the first and second users as members of the same 
authorized domain. 

3. (Original) The method of claim 2, in which the one or more domain certificates 
comprise a first domain certificate identifying the first user as a member of an 
authorized domain, and a second domain certificate identifying the second user as a 
member of the authorized domain. 

4. (Original) The method of claim 2, in which the one or more domain certificates 
comprise a single certificate identifying the first and second users as members of the 
authorized domain. 

5. (Original) The method of claim 1 , in which the operation comprises at least one of: 

a rendering of the content item, a recording of the content item, a transfer of the 
content item and a creation of a copy of the content item. 
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6. (Currently amended) The method of claim^l-eF 2, comprising receiving a content 
right containing necessary information for performing the requested operation on the 
content item, the user right certificate of the second user authorizing the second user 
to perform the requested operation using the content right. 

7. (Currently amended) The method of claim 6 as d e p e nd e nt from c l a i m 2 , in which 
the operation is not authorized if the content right does not identify the authorized 
domain. 

8. (Currently amended) A device arranged to perform an operation requested by a 
first user on a content item in accordance with a user right certificate identifying a 
second user and authorizing the second user to perform the requested operation on 
the content item, being arranged to authorize the operation upon receipt of-ef 
information from the first user linking the first user and the user right certificate of the 
second user. 

9. (Original) The device of claim 8, in which the information comprises one or more 
domain certificates identifying the first and second users as members of the same 
authorized domain. 

10. (Original) The device of claim 9, in which the one or more domain certificates 
comprise a first domain certificate identifying the first user as a member of an 
authorized domain, and a second domain certificate identifying the second user as a 
member of the authorized domain. 

1 1 . (Original) The device of claim 9, in which the one or more domain certificates 
comprise a single certificate identifying the first and second users as members of the 
authorized domain. 
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12. (Original) Tlie device of claim 9, being arranged to receive an identifier for the 
first user from an identification device and to perform the operation if the received 
identifier matches the identification of the first user in the one or more domain 
certificates. 

13. (Original) The device of claim 8 or 9, being arranged to receive a content right 
containing necessary information for performing the requested operation on the 
content item, the user right certificate of the second user authorizing the second user 
to perform the requested operation using the content right. 

14. (Original) The device of claim 1 1 , in which at least a portion of the content right is 
encrypted using an encryption key for which a corresponding decryption key is 
available to the device. 

15. (Original) The device of claim 13, in which the content right is provided with a 
digital signature allowing verification of the authenticity of the content right. 

16. (Original) The device of claim 15, being arranged to perform the operation if the 
digital signature can be verified successfully using a digital certificate associated with 
an authorized content provider. 

17. (Original) The device of claim 15, being arranged to perform the operation if the 
digital signature can be verified successfully using a digital certificate associated with 
a particular device. 

18. (Original) The device of claim 15, being arranged to refuse to perform the 
operation if the digital signature cannot be verified successfully using a digital 
certificate associated with an authorized content provider and a digital watermark 
associated with the authorized content provider is present in the content item. 
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19. (Current amended) The device of clainn 13 or 15, being arranged to extract a 
public key from the content right and to use the extracted public key in determining 
whether the operation is authorized. 

20. (Original) The device of claim 13, being arranged to determine a robust fingerprint 
for the content item and to refuse to perform the operation if the determined robust 
fingerprint does not match a robust fingerprint comprised in the content right. 

21 . (Currently amended) The device of claim 13 as dopondont from claim 9, being 
arranged to receive a content right containing necessary information for performing 
the recuested operation on the content item, the user right certificate of the second 
user authorizing the second user to perform the recuested operation using the 
content right, and to refuse to perform the operation if the authorized domain is not 
identified by the content right. 

22. (Original) A method of authorizing an operation requested by a first user on a 
content item in accordance with a content right containing necessary information for 
performing the requested operation on the content item and a user right certificate 
identifying the first user and authorizing the first user to perform the requested 
operation using the content right. 

23. (Original) A device arranged to perform an operation requested by a first user on 
a content item in accordance with a content right containing necessary information for 
performing the requested operation on the content item and a user right certificate 
identifying the first user and authorizing the first user to perform the requested 
operation using the content right. 

24. (Original) The device of claim 23, in which at least a portion of the content right is 
encrypted using an encryption key for which a corresponding decryption key is 
available to the device. 
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25. (Original) Tlie device of claim 23, in which the content right is provided with a 
digital signature allowing verification of the authenticity of the content right. 

26. (Original) The device of claim 25, being arranged to perform the operation if the 
digital signature can be verified successfully using a digital certificate associated with 
an authorized content provider. 

27. (Original) The device of claim 25, being arranged to perform the operation if the 
digital signature can be verified successfully using a digital certificate associated with 
a particular device. 

28. (Original) The device of claim 25, being arranged to refuse to perform the 
operation if the digital signature cannot be verified successfully using a digital 
certificate associated with an authorized content provider and a digital watermark 
associated with the authorized content provider is present in the content item. 

29. (Original) The device of claim 23, being arranged to determine a robust fingerprint 
for the content item and to refuse to perform the operation if the determined robust 
fingerprint does not match a robust fingerprint comprised in the content right. 

30. (Original) The device of claim 23, being arranged to receive an identifier for the 
first user from an identification device and to perform the operation if the received 
identifier matches the identification of the first user in the user right certificate. 

31 . (New) The method of claim 1 , comprising receiving a content right containing 
necessary information for performing the requested operation on the content item, 
the user right certificate of the second user authorizing the second user to perform 
the requested operation using the content right. 

32. (New) The device of claim 13, being arranged to extract a public key from the 
content right and to use the extracted public key in determining whether the operation 
is authorized. 
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